Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: BHryHjSGqzGu316mH6ck4x67nivgWeKKxvo34Y21ves=
Subject key identifier: 48:7C:B0:EE:45:48:06:3D:55:62:86:F7:6A:D1:BF:4C:12:E6:60:0F
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 0194BC3C7644E1038B221EED75351BAD869B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0746
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: xkcQ7ly50RY6yiKIjTe9BFkhCZbdFSdFvGEarmOSQzg=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:76:44:e1:03:8b:22:1e:ed:75:35:1b:ad:86:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=487cb0ee4548063d556286f76ad1bf4c12e6600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:48:36:9f:fc:3e:1f:4c:5c:56:b7:2d:c2:
d2:19:30:a2:97:74:02:5c:4c:d4:d3:72:7a:aa:eb:
81:c1:3b:51:2f:c0:b2:c2:54:43:fc:a9:a5:0c:72:
aa:5d:2b:41:38:0d:1d:84:8e:54:ec:d4:62:6d:c5:
b7:4c:17:db:2a:c2:ca:3b:a2:15:a6:bb:8c:9b:8e:
79:cb:1d:80:45:d5:4b:19:3c:6f:6c:eb:5a:9a:0a:
e9:8c:1d:96:09:b2:0f:cc:c5:10:38:15:02:7c:a4:
9b:71:19:ab:23:04:15:31:7a:b8:f4:9c:f4:77:f7:
6f:ec:63:7c:ad:d3:d3:a6:80:54:76:a8:20:8b:93:
22:ce:fd:cb:a4:22:96:a7:72:4c:b2:89:ed:80:52:
03:bd:23:57:8d:d5:39:bf:6d:f7:70:46:43:0c:34:
1e:d4:90:85:fc:79:63:8b:e9:f0:37:36:67:2a:2b:
85:d4:72:a0:66:4b:e8:46:ea:bb:55:66:ad:8a:98:
67:51:f5:54:c8:85:3d:48:6f:5e:01:7f:34:13:70:
77:33:92:81:12:17:3f:4d:b7:9f:be:44:69:8b:65:
73:d4:11:02:29:1e:2c:ce:c2:01:a8:0a:2a:c9:2a:
bb:62:e5:5f:df:aa:dd:e8:2a:df:10:e9:10:c4:84:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:B0:EE:45:48:06:3D:55:62:86:F7:6A:D1:BF:4C:12:E6:60:0F
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:21:42:59:d4:94:d5:dc:b9:fb:41:f7:5b:f5:e3:92:e6:0b:
77:25:0a:dd:b3:10:63:7f:57:f6:ce:39:0a:0f:b4:2c:49:b5:
18:b8:88:97:1c:16:67:3e:bb:d1:c9:d9:42:a5:6a:f1:81:7c:
a2:b5:5b:ed:ee:f6:85:4c:8a:08:29:fe:21:d7:d4:2e:2d:b7:
1e:28:55:a8:1a:45:2e:6f:0a:bb:bb:cb:87:c9:df:c2:0f:3e:
e5:fd:b8:b2:06:34:0a:e4:7f:59:22:4c:cf:71:2b:42:86:2f:
38:cb:2e:22:8c:e9:48:08:d2:f4:0d:2e:8b:7b:49:20:cc:84:
4c:e8:de:ac:18:4e:1b:6d:8d:37:92:71:59:81:1f:32:33:69:
a2:3c:fa:69:0d:16:bd:f4:d1:ec:3d:8b:3f:68:ea:8f:ec:e8:
51:1b:1d:b2:af:b9:db:57:e2:47:90:8c:6c:38:af:cb:5f:d6:
fe:9e:50:21:53:fa:e8:01:12:ee:aa:f5:74:61:1b:35:8e:20:
b2:11:a4:2b:24:f2:cb:bc:c2:81:3d:4d:6d:e1:67:c4:b6:74:
20:36:06:40:71:d2:99:15:41:e8:89:63:2e:6b:b3:de:f7:c3:
cd:99:7a:28:b9:90:2b:f1:ef:72:6d:c3:26:8c:42:c4:36:69:
00:a4:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:29 2025 by rpki-client